mirrors/pfsense
2
0
Fork 0
mirror of https://github.com/pfsense/pfsense.git synced 2025-10-26 11:38:35 +00:00
Code Issues Packages Projects Releases Wiki Activity

Remove strongswan's cert directories and repopulate them, to ensure no removed CAs, certs, or CRLs remain. Ticket #5238

Browse Source
This commit is contained in:
Chris Buechler 2015-10-12 22:03:59 -05:00
parent 54a5275743
commit f248cdc0fe
1 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
etc/inc/vpn.inc
View File

@ -176,6 +176,11 @@ function vpn_ipsec_configure($restart = false) {
if (!is_dir("{$g['varetc_path']}/ipsec/ipsec.d")) {
mkdir("{$g['varetc_path']}/ipsec/ipsec.d");
}
// delete these paths first to ensure old CAs, certs and CRLs aren't left behind. redmine #5238
rmdir_recursive($capath);
rmdir_recursive($keypath);
rmdir_recursive($crlpath);
rmdir_recursive($certpath);
if (!is_dir($capath)) {
mkdir($capath);
}